Unsafe Impedance Safe Languages and Safe by Design Software

被引:0
|
作者
Barney, Lee [1 ]
Neto, Adolfo [2 ]
机构
[1] Brigham Young Univ Idaho, Rexburg, ID 83460 USA
[2] Univ Tecnol Fed Parana, Curitiba, Parana, Brazil
关键词
Memory Safe Languages; Functional Programming; Secure By Design; Secure By Default;
D O I
10.1145/3677995.3678196
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
In December 2023, security agencies from five countries in North America, Europe, and the south Pacific produced a document encouraging senior executives in all software producing organizations to take responsibility for and oversight of the security of the software their organizations produce. In February 2024, the White House released a cybersecurity outline, highlighting the December document. In this work we review the safe languages listed in these documents, and compare the safety of those languages with Erlang and Elixir, two BEAM languages. These security agencies' declaration of some languages as safe is necessary but insufficient to make wise decisions regarding what language to use when creating code. We propose an additional way of looking at languages and the ease with which unsafe code can be written and used. We call this new perspective unsafe impedance. We then go on to use unsafe impedance to examine nine languages that are considered to be safe. Finally, we suggest that business processes include what we refer to as an Unsafe Acceptance Process. This Unsafe Acceptance Process can be used as part of the memory safe roadmaps suggested by these agencies. Unsafe Acceptance Processes can aid organizations in their production of safe by design software.
引用
收藏
页码:76 / 83
页数:8
相关论文
共 50 条
  • [41] Generating Safe Template Languages
    Heidenreich, Florian
    Johannes, Jendrik
    Seifert, Mirko
    Wende, Christian
    Boehme, Marcel
    ACM SIGPLAN NOTICES, 2010, 45 (02) : 99 - 108
  • [42] Safe and Reliable Software
    Gupta, Pankaj
    ITNOW, 2024, 66 (02) : 62 - 63
  • [43] HOW SAFE IS SAFE IN PRODUCT DESIGN
    VACCARI, JA
    MATERIALS ENGINEERING, 1976, 84 (02): : 3 - 3
  • [44] Fault-Safe Code Motion for Type-Safe Languages
    Murphy, Brian R.
    Menon, Vijay
    Schneider, Florian T.
    Shpeisman, Tatiana
    Adl-Tabatabai, Ali-Reza
    CGO 2008: SIXTH INTERNATIONAL SYMPOSIUM ON CODE GENERATION AND OPTIMIZATION, PROCEEDINGS, 2008, : 144 - 154
  • [45] 'This place does not feel safe': safe and unsafe spaces in Swedish school-age educare
    Borg, Anna-Lena
    CHILDRENS GEOGRAPHIES, 2023, 21 (06) : 1044 - 1057
  • [46] Transitioning Silver: From Big to Small, Safe to Unsafe?
    Powers, Christina M.
    MacKillop, Emiko A.
    Wrench, Nicola
    Ryde, Ian
    Smith, Amanda M.
    Seidler, Frederic J.
    Slotkin, Theodore A.
    INTERNATIONAL JOURNAL OF TOXICOLOGY, 2009, 28 (01) : 61 - 62
  • [47] Unsafe at any speed? Borders, mobility and 'safe citizenship'
    Muller, Benjamin J.
    CITIZENSHIP STUDIES, 2010, 14 (01) : 75 - 88
  • [48] Safe and unsafe duration of fasting for children with MCAD deficiency
    Terry G. J. Derks
    Francjan J. van Spronsen
    Jan Peter Rake
    Christian S. van der Hilst
    Mark M. Span
    G. Peter A. Smit
    European Journal of Pediatrics, 2007, 166 : 5 - 11
  • [49] POSTFIRE LITTER MICROSITES - SAFE FOR SEEDS, UNSAFE FOR SEEDLINGS
    LAMONT, BB
    WITKOWSKI, ETF
    ENRIGHT, NJ
    ECOLOGY, 1993, 74 (02) : 501 - 512
  • [50] ANTIHISTAMINES: SAFE OR UNSAFE DURING PREGNANCY? - A CASE REPORT
    Bidot, L.
    Krishnan, S.
    Aiken, T.
    Hollinger, S.
    Shah, D.
    JOURNAL OF INVESTIGATIVE MEDICINE, 2016, 64 (02) : 579 - 579